Qualcomm Qcn9074 vulnerabilities, page 5
368 vulnerabilities
Known vulnerabilities in Qualcomm Qcn9074, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2025-27074qualcomm, inc. · snapdragon +95 moreIncorrect Calculation of Buffer Size in SCE-MinkMemory corruption while processing a GP command response.EPSS0.09%HighCVE-2025-27065qualcomm, inc. · snapdragon +149 moreBuffer Over-read in WLAN FirmwareTransient DOS while processing a frame with malformed shared-key descriptor.EPSS0.22%HighCVE-2025-27043qualcomm, inc. · snapdragon +203 moreBuffer Copy Without Checking Size of Input in VideoMemory corruption while processing manipulated payload in video firmware.EPSS0.10%HighCVE-2025-27053qualcomm, inc. · snapdragon +317 moreIncorrect Calculation of Buffer Size in HLOSMemory corruption during PlayReady APP usecase while processing TA commands.EPSS0.09%HighCVE-2025-27066qualcomm, inc. · snapdragon +370 moreReachable Assertion in WLAN FirmwareTransient DOS while processing an ANQP message.EPSS0.28%MediumCVE-2025-27030qualcomm, inc. · snapdragon +41 moreBuffer Over-read in Audioinformation disclosure while invoking calibration data from user space to update firmware size.EPSS0.09%HighCVE-2020-11278qualcomm · aqt1000_firmware +376 morequalcomm aqt1000_firmwarePossible denial of service while handling host WMI command due to improper validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingEPSS0.63%HighCVE-2020-11235qualcomm · apq8009_firmware +537 morequalcomm apq8009_firmwareBuffer overflow might occur while parsing unified command due to lack of check of input data received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingEPSS0.17%HighCVE-2020-11119qualcomm · apq8009_firmware +470 morequalcomm apq8009_firmwareBuffer over-read can happen when the buffer length received from response handlers is more than the size of the payload in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingEPSS0.78%CriticalCVE-2020-11276qualcomm · apq8009_firmware +513 morequalcomm apq8009_firmwarePossible buffer over read while processing P2P IE and NOA attribute of beacon and probe response frames due to improper validation of P2P IE and NOA attribute lengths in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingEPSS0.83%CriticalCVE-2020-11134qualcomm · aqt1000_firmware +324 morequalcomm aqt1000_firmwarePossible stack out of bound write might happen due to time bitmap length and bit duration fields of the attributes like NAN ranging setup attribute inside a NAN management frame are not Properly validated in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingEPSS0.80%HighCVE-2020-11280qualcomm · aqt1000_firmware +411 morequalcomm aqt1000_firmwareDenial of service while processing fine timing measurement request (FTMR) frame with reserved bits set in the FTM parameter IE due to improper error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingEPSS0.63%CriticalCVE-2020-11213qualcomm · apq8009_firmware +554 morequalcomm apq8009_firmwareOut of bound reads might occur in while processing Service descriptor due to improper validation of length of fields in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.88%HighCVE-2020-11241qualcomm · apq8009_firmware +425 morequalcomm apq8009_firmwareOut of bound read will happen if EAPOL Key length is less than expected while processing NAN shared key descriptor attribute in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingEPSS0.60%HighCVE-2020-11281qualcomm · aqt1000_firmware +346 morequalcomm aqt1000_firmwareAllowing RTT frames to be linked with non randomized MAC address by comparing the sequence numbers can lead to information disclosure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingEPSS0.69%CriticalCVE-2020-11212qualcomm · apq8009_firmware +540 morequalcomm apq8009_firmwareOut of bounds reads while parsing NAN beacons attributes and OUIs due to improper length of field check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingEPSS0.88%CriticalCVE-2020-11126qualcomm · apq8096au_firmware +390 morequalcomm apq8096au_firmwarePossible out of bound read while WLAN frame parsing due to lack of check for body and header length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingEPSS0.80%CriticalCVE-2020-11191qualcomm · apq8009_firmware +475 morequalcomm apq8009_firmwareOut of bound read occurs while processing crafted SDP due to lack of check of null string in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.94%HighCVE-2020-11252qualcomm · aqt1000_firmware +309 morequalcomm aqt1000_firmwareTrustzone initialization code will disable xPU`s when memory dumps are enabled and lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingEPSS0.19%CriticalCVE-2020-11275qualcomm · apq8009_firmware +470 morequalcomm apq8009_firmwarePossible buffer over-read while parsing quiet IE in Rx beacon frame due to improper check of IE length in received beacon in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingEPSS0.83%